Port 22

~ 31 Mar 2022 ~

Zyxel Releases Patches for Critical Bug Affecting Business Firewall and VPN Devices

Fake Emergency Search Warrants Draw Scrutiny from Capitol Hill

Vulnerabilities in Rockwell Automation PLCs Could Enable Stuxnet-Like Attacks

Spring Fixes Zero-Day Vulnerability in Framework and Spring Boot

Apple emits macOS, iOS, iPadOS patches for 'exploited' security bugs

Ransomware: Should Companies Ever Pay Up?

Companies Going to Greater Lengths to Hire Cybersecurity Staff

Microsoft protects against human-operated ransomware across the full attack chain in the 2022 MITRE Engenuity ATT&CK Evaluations

Global BEC Crackdown Nets 65 Suspects

Apple Issues Patches for 2 Actively Exploited Zero-Days in iPhone, iPad and Mac Devices

U.S. Cyber Command Adds APUS as Member in Newly Formed Academic Network

3 strategies to launch an effective data governance plan

Patch now: RCE Spring4shell hits Java Spring framework

Protecting Your Organization Against a New Class of Cyber Threats: HEAT

Nvidia DGX systems prone to side channel, covert attacks

Nation-State Hackers Ramp Up Ukraine War-Themed Attacks

Lazarus Trojanized DeFi app for delivering malware

Chrome Zero-Day from North Korea

The Last Cell Tower in Mariupol

Schneider Electric SCADAPack Workbench

Hitachi Energy e-mesh EMS

Fuji Electric Alpha5

Mitsubishi Electric FA Products

Rockwell Automation Logix Controllers

General Electric Renewable Energy MDS Radios

Rockwell Automation Studio 5000 Logix Designer

Expect 'long tail of cyber retaliation' from Russia for sanctions, says ExtraHop CEO

Security Patch Releases for Critical Zero-Day Bug in Java Spring Framework

Bugs in Wyze Cams Could Let Attackers Takeover Devices and Access Video Feeds

Cryptomining groups fight fiercely for cloud resources

New Python-based Ransomware Targeting JupyterLab Web Notebooks

Hackers Increasingly Using 'Browser in a Browser' Technique in Ukraine Related Attacks

UK spy boss warns China hopes Russia will help it take over tech standards

Russia, Iran, Saudi Arabia are top sources of online misinformation

Yale finance director ordered $40m in computers to resell on the sly

~ 30 Mar 2022 ~

Zlib crash-an-app bug finally squashed, 17 years later

Unpatched Java Spring Framework 0-Day RCE Bug Threatens Enterprise Web Apps Security

Zero-Day Vulnerability Discovered in Java Spring Framework

QNAP Warns of OpenSSL Infinite Loop Vulnerability Affecting NAS Device

A Sinister Way to Beat Multifactor Authentication Is on the Rise

CISA, DOE Warn of Attacks on Uninterruptible Power Supply (UPS) Devices

Ubiquiti sues Krebs on Security for defamation

Smart Cities: Secure by Design? It Takes a Village

Cybercriminals Fighting Over Cloud Workloads for Cryptomining

Viasat spills on the Russian attack, warns of continued risks

VMware Horizon platform pummeled by Log4j-fueled attacks

Cloud Security Architecture Needs to Be Strategic, Realistic, and Based on Risk

How Security Complexity Is Being Weaponized

Researchers Used a Decommissioned Satellite to Broadcast Hacker TV

Electric Vehicle DC charging tripped by a wireless hack

Stalking with an Apple Watch

How to Prevent the Next Log4j-Style Zero-Day Vulnerability

Women in tech: Unique insights from a lifelong pursuit of innovation

Researchers Expose Mars Stealer Malware Campaign Using Google Ads to Spread

UK Cyber Security Centre advises review of risk posed by Russian tech

Lapsus$ back? Researchers claim extortion gang attacked software consultancy Globant

Hondas Keyless Access Bug Could Let Thieves Remotely Unlock and Start Vehicles

Improve Your Hacking Skills with 9 Python Courses for Just $39

Detailed: Critical hijacking bugs that took months to patch in Microsoft Azure Defender for IoT

LAPSUS$ Claims to Have Breached IT Firm Globant; Leaks 70GB of Data

~ 29 Mar 2022 ~

Log4j Attacks Continue Unabated Against VMware Horizon Servers

CISA Warns of Ongoing Cyber Attacks Targeting Internet-Connected UPS Devices

Mutating Verblecon malware in illicit cryptomining ... so far

Understanding Private 5G LANs in the Enterprise

Precursor Malware is a Early Warning Sign for Ransomware